Lots of speculation here, not much analysis, even from lazy gits like me. Chrome web inspector kindly gives the "Initiator" for every request. In this case it'

Lots of speculation here, not much analysis, even from lazy gits like me. Chrome web inspector kindly gives the "Initiator" for every request. In this case it's cnn-header-second.min.js. Load that, and Chrome again kindly detects minified JS and offers to pretty-print it. The context here appears to be some kind of ad console tool, added by CNN, not by an ad. The relevant function is at https://pastebin.com/EwgPAM6T https://pastebin.com/EwgPAM6T It's a bit obfuscated/minified, and they don't seem to have a non-minified version available, so it's not clear exactly what functionality this is enabling. Either way, not really a keylogger if it's not capturing all keystrokes and shipping them off somewhere.